Abstract:Building secure systems is difficult for many reasons. This paper deals with two of the main challenges: (i) the lack of security expertise in development teams and (ii) the inadequacy of existing methodologies to support developers who are not security experts. The security standard ISO 14508 Common Criteria (CC) together with secure design techniques such as UMLsec can provide the security expertise, knowledge, and guidelines that are needed. However, security expertise and guidelines are not stated explicitly in the CC. They are rather phrased in security domain terminology and difficult to understand for developers. This means that some general security and secure design expertise are required to fully take advantage of the CC and UMLsec. In addition, there is the problem of tracing security requirements and objectives into solution design, which is needed for proof of requirements fulfilment. This paper describes a security requirements engineering methodology called SecReq. SecReq combines three techniques: the CC, the heuristic requirements editor HeRA, and UMLsec. SecReq makes systematic use of the security engineering knowledge contained in the CC and UMLsec, as well as security-related heuristics in the HeRA tool. The integrated SecReq method supports early detection of security-related issues (HeRA), their systematic refinement guided by the CC, and the ability to trace security requirements into UML design models. A feedback loop helps reusing experience within SecReq and turns the approach into an iterative process for the secure system life-cycle, also in the presence of system evolution.

An Integrated Model for Software Security Testing Requirements

Software Testing Models Against Information Security Requirements

Research on Information Security Model and Security System Design

Introduction to the Special Issue on Design for Testability and Reliability of Security-aware Hardware

A Security Assurance Framework Combining Formal Verification and Security Functional Testing

FESR: A Framework for Eliciting Security Requirements Based on Integration of Common Criteria and Weakness Detection Formal Model

A Threat Model Driven Approach for Security Testing

A Business Process-based Method on Security Requirement Analysis of Information Systems

A Unified Use-Misuse Case Model for Capturing and Analysing Safety and Security Requirements

Model-based Approach for Software Test Adequacy Analysis

Eliciting security requirements and tracing them to design: an integration of Common Criteria, heuristics, and UMLsec

Analysing security requirements patterns based on problems decomposition and composition.

Safety Requirements Modeling Based on Rucm

Analyzing security requirements as relationships among strategic actors

Security Requirements Engineering in the Wild: A Survey of Common Practices

A Formal Model to Facilitate Security Testing in Modern Automotive Systems

A Formal Model of Security Controls' Capabilities and Its Applications to Policy Refinement and Incident Management

Model-Based Safety and Security Engineering

RESEARCH AND IMPLEMENTATION OF MODEL OF INFORMATION SECURITY EVALUATION

Complete Requirements-based Testing with Finite State Machines

Implementation of Security Features in Software Development Phases